Loading
Access top-rated troubleshooting tools for Microsoft Intune. Diagnose enrollment issues, analyze Intune Management Extension logs, troubleshoot Autopilot deployments, and debug device-side problems.
A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.
A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.
A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.
A PowerShell script for analyzing Intune Management Extension logs and creating timeline reports. Tracks Win32App deployments, WinGetApp packages, PowerShell scripts, Proactive Remediations, Custom Compliance, and Autopilot ESP phases with HTML reports and integrated LogViewerUI.
CMTrace Open is an open-source log viewer (Tauri v2, React/TypeScript, Rust) inspired by CMTrace.exe. It supports CCM, simple, and plain text logs with real-time tailing, virtual scrolling, filtering, highlighting, and color-coded severities. It includes embedded error lookup and diagnostics (IME log analysis, event timeline, download statistics, and a summary dashboard) for quick Intune-oriented insights. Flexible input from files, folders, or drag-and-drop.
A Windows utility for monitoring and analyzing MDM SyncML protocol activity on Windows 10/11 devices. Features Autopilot hardware hash decoding, NodeCache registry lookup, hex viewer, real-time protocol stream capturing, health attestation status codes, and WiFi/VPN enumeration.
A macOS helper application designed to empower end-users by providing quick access to crucial information and actions. Features a tray menu, dashboard, user identity info, installed apps list, self-service capabilities, knowledge base access, and Company Portal integration.
A comprehensive Windows-based toolbox for troubleshooting Intune-managed devices. Features registry debugging, Autopilot validation, live MDM event monitoring, SyncML visualization, Win32 app redeployment, IME log analysis, and includes IntuneDeviceDetailsGUI, SyncMLViewer, and CMTrace.
A collection of PowerShell detection and remediation scripts for Microsoft Intune. Organized into categories: Device Compliance, Device Configuration, Device Performance, Microsoft Defender AV, Miscellaneous, Reporting, and Toast Notifications for proactive endpoint issue resolution.
Windows Update Remediation Tool is an automated WinForms utility for diagnosing and repairing Windows Update issues. It offers a selectable sequence of remediation steps—stopping services, cleaning caches, resetting permissions, re-registering DLLs, Winsock reset, restarting services, update scans, and SetupDiag diagnostics—with built-in logging. Administrators can run it elevated, monitor per-step progress, and generate logs for troubleshooting.
Intune Log Reader for Windows delivers real-time analysis and monitoring of the Microsoft Intune Management Extension logs on Windows endpoints. It automatically parses logs, categorizes entries into Device, Applications, Configurations, Compliance, and Sync Status, detects recurring error patterns, and presents insights in a professional dashboard with advanced search and export options. Optional live monitoring updates provide up-to-date visibility for troubleshooting and auditing, built for Windows desktop with Flutter and Dart.
IntuneLogWatch is a macOS application for analyzing Microsoft Intune logs and delivering human-readable insights. It converts raw log data into understandable summaries, highlighting trends and issues for IT admins. Designed to simplify troubleshooting and ongoing monitoring of Intune deployments with clear, actionable information.
The Intune Network Requirements PowerShell tool is a comprehensive script designed to validate whether all required Microsoft Intune and related service endpoints are reachable from a given network. It performs layered tests, including DNS resolution, TCP/UDP connectivity, HTTP/S responses, TLS/SSL validation, and optional CRL verification, to detect issues such as blocked ports, incorrect routing, proxy or TLS interception, and missing endpoint access.
TrayLight is a lightweight Windows System Tray app that provides instant device info, IT support shortcuts, and Intune sync, configurable via ADMX policy or Intune Settings Catalog. It ships with six default info tiles (Computer Name, OS Version, Last Reboot, Storage Usage, Serial Number, Intune Sync), supports extra ADMX tiles, up to six Quick Action shortcuts, and dynamic placeholders for live data. It supports branding, localization, dark/light themes, and zero-configuration deployment via MSI or policy-based provisioning through Intune or Group Policy.
PowerShell tool for Microsoft Intune that forces an immediate retry of a failed Win32 app deployment by clearing the local IME state for the target AppId and restarting the Intune Management Extension service. It does not uninstall the app or modify files; it only resets local Intune state to bypass the Global Re-evaluation Schedule (GRS) and prompt another install attempt. Includes a WhatIf preview and logs to C:\ProgramData\IME-DeepReset-<AppId>.log.
Intune Remote Help Launcher is a PowerShell WPF tool for IT admins to search Intune-managed devices by name or primary user, view device details, and launch Microsoft Remote Help sessions from one interface. It supports Windows, Android, iOS, and macOS devices, displays OS, compliance, ownership, model and last sync, and can issue sync or restart commands or open the device in the Intune admin center. It uses Microsoft Graph delegated authentication (auto-installs the Graph module if needed) and requires Remote Help licensing to be configured.
A PowerShell module for Intune MDM policy reporting and debugging, similar to GPResult. Generates HTML reports showing device information, Intune sync status, applied settings by policy scope, Win32 app assignments, script policies, remediation status, LAPS settings, and certificate assignments.
Intune Log Collector is an Azure-based solution that collects logs from Intune-managed devices, including files, directories, and event logs. It deploys a Function App, Storage Account, and Key Vault, with the Remediation script driving log collection per LogsGatherRules.json and uploading a compressed archive to the logs container. Deployments support Azure Template Spec (Bicep/ARM) or direct ARM templates, with optional UI and post-deployment steps.
Windows Autopatch Fix provides intelligent detection and targeted remediation for Windows Update failures on Intune-managed devices. It offers 15 configurable repair steps that execute only when needed, minimizing downtime and system impact, with comprehensive logging and support for 20+ error codes.
CheckMicrosoftEndpoints is a PowerShell-based toolkit that validates connectivity to Microsoft services used by Intune and other cloud workloads. It offers full endpoint connectivity tests with latency and response-time measurements, selective service checks, baseline drift detection, and HTML reporting. Designed for enterprise IT, it supports firewall/proxy validation, network diagnostics, and quick status reporting from Windows clients/servers, with no admin rights required for most checks.
macOS Defender Check is a testing toolkit for Microsoft Defender for Endpoint on macOS. It validates MDE installation and health, tests Tamper Protection and Web Protection across multiple browsers, and supports custom URL indicators with CSV import. The suite produces detailed logs and CSV reports to aid pre- and post-deployment validation, troubleshooting, and compliance auditing.
GIST - Gist Intune Script Trigger is a compact collection of PowerShell scripts for diagnosing and troubleshooting Intune devices. It features a menu-driven interface accessible via a simple one-liner (iwr gist.ittips.ch | iex) and supports direct gist IDs for quick runs. The scripts require no parameters, have no external dependencies, and prioritize safety by not altering system settings.
CMTrace Web (CMTrace.dev) is a free, browser-based log viewer for ConfigMgr/SCCM and Intune logs. Reimplementing CMTrace in the browser, it handles 1M+ line logs with color-coded severities, error-code lookups, and side-by-side diffs, all client-side and offline as a PWA. It opens .log, .txt, .gz, and .zip, with Intune/IME presets to jump straight to relevant logs.
A web-based diagnostic tool for troubleshooting Microsoft Intune device registration issues. Analyzes dsregcmd /status output to detect Entra ID and Hybrid Entra ID join states, MDM enrollment status, and provides instant error code mapping with actionable solutions. All processing happens locally in the browser.